Skip to main content

SA-2 Allocation of Resources

Description

The University determines, documents, and allocates as part of its capital planning and investment control process, the resources required to adequately protect information resources.

Applicability

  • The University is responsible for ensuring that all requirements of this Control are satisfied.

Implementation

  • 1 - In accordance with Texas Administrative Code §202.70, the University is responsible for:

    • 1.1 - Determining information security requirements for information resources or service in the business process planning;
    • 1.2 - Determining, documenting, and allocating the resources required to protect information resources or services as part of the capital planning and investment control process: and
    • 1.3 - Establishing a discrete line item for information security in university programming and budgeting documentation.